Live CVE & 0day intelligence

Sound the depths of every vulnerability.

Newly released CVEs across every platform — sleek to read, verbose on demand, and served raw as markdown for AI and agent ingestion. Severity reads as depth: the deeper the contact, the graver the threat.

Browse the feed For agents → /llms.txt

Depth = severity + exploitation

HadalCritical and actively exploited (CISA KEV / 0day)
AbyssalCritical with a public exploit or in-the-wild use
MidnightCritical, or high with PoC / in-the-wild
TwilightHigh severity, or a signal on a lesser flaw
SunlitLow / medium · no exploitation signal

74984

Tracked CVEs

7003

Critical

765

Exploited in wild

5606

Last 7 days

Trending now

Bluesky + Hacker News mentions, last 7 days

1CVE-2026-109618Critical· 9.2RCE via OOM corruption4896
2CVE-2026-109619Critical· 9.2RCE via stale global state2196
3CVE-2026-111497Critical· 9.2Out-of-Bounds Write in Google Brotli Decoder1892
4CVE-2026-110264Critical· 10.0Integer Overflow or Wraparound in GitLab367
5CVE-2026-112816Critical· 10.0Improper certificate validation in the HTTPS listener in LXD367
6CVE-2026-116366Critical· 9.5Unauthenticated RCE vulnerability against ClickHouse Server364
7CVE-2026-97631Critical· 9.5Pre-boot RCE in EDK II PXE driver264
8CVE-2026-91403Critical· 9.1Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE)262

This week's digest →All digests

Feed

35 matches

CVE-2026-48175Medium· 5.5

yesterday

Processing a malformed RRC message leads to an out-of-bounds read, resulting in a denial-of-service condition.

▾ SunlitSamsung Semiconductor · Exynos 1280via CVEORG

CVE-2026-48173None

yesterday

In the NAS message handler, improper validation of the length field in NAS message causes memory corruption

▾ SunlitSamsung Semiconductor · Exynos 850via CVEORG

CVE-2026-35494None

yesterday

In the baseband, memory corruption during NAS packet processing can cause a denial of service.

▾ SunlitSamsung Semiconductor · Exynos 1280via CVEORG

CVE-2026-68993None

yesterday

A double free vulnerability in NPU driver due to improper pointer management (940)

▾ SunlitSamsung Semiconductor · Exynos 1480via CVEORG

CVE-2026-48178None

yesterday

Out of bound access in PPC due to race condition in global variable access

▾ SunlitSamsung Semiconductor · Exynos 2200via CVEORG

CVE-2026-48174None

yesterday

In the NR RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition.

▾ SunlitSamsung Semiconductor · Exynos 1280via CVEORG

CVE-2026-68994None

yesterday

A double free vulnerability in NPU driver due to improper pointer management (941)

▾ SunlitSamsung Semiconductor · Exynos 1480via CVEORG

CVE-2026-48186None

yesterday

Improper handling of messages before AS security activation can cause unexpected behavior

▾ SunlitSamsung Semiconductor · Exynos 1280via CVEORG

CVE-2026-68985None

yesterday

In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service.

▾ SunlitSamsung Semiconductor · Exynos 1280via CVEORG

CVE-2026-48183None

yesterday

Improper permission handling during buffer operations allows untrusted applications to create memory mappings with inappropriate permissions

▾ SunlitSamsung Semiconductor · Exynos 1480via CVEORG

CVE-2026-69005None

yesterday

Integer overflow in NPU driver parameter processing due to insufficient bounds checking.

▾ SunlitSamsung Semiconductor · Exynos 1480via CVEORG

CVE-2026-68984None

yesterday

In the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged application to trigger memory corruption.

▾ SunlitSamsung Semiconductor · Exynos 2100via CVEORG

CVE-2026-69068None

yesterday

Insufficient length validation in the GNSS firmware loader may lead to corruption of kernel memory.

▾ SunlitSamsung Semiconductor · Exynos Modem 5300via CVEORG

CVE-2026-69006None

yesterday

Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption.

▾ SunlitSamsung Semiconductor · Exynos 850via CVEORG

CVE-2026-69025None

yesterday

In the Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service

▾ SunlitSamsung Semiconductor · Exynos 1480via CVEORG

CVE-2026-68990None

yesterday

In the Samsung Exynos H-Arx DRM plugin, improper input validation during buffer operations can cause memory corruption, potentially leading to denial of service or privilege escalation.

▾ SunlitSamsung Semiconductor · Exynos 1480via CVEORG

CVE-2026-69066None

yesterday

Memory corruption in GPU driver due to improper validation of VMID reservation.

▾ SunlitSamsung Semiconductor · Exynos 2200via CVEORG

CVE-2026-69002None

yesterday

Incorrect authorization in Samsung framework services due to missing permission checks

▾ SunlitSamsung Semiconductor · Exynos 1580via CVEORG

CVE-2026-68991None

yesterday

In the Samsung Exynos ENN NeuralNetworks HAL, improper input validation during request processing can cause memory corruption and lead to a denial of service condition.

▾ SunlitSamsung Semiconductor · Exynos 1480via CVEORG

CVE-2026-69050None

yesterday

Out-of-bounds memory access in a device driver due to improper resource state tracking.

▾ SunlitSamsung Semiconductor · Exynos 1480via CVEORG

CVE-2026-69043None

yesterday

In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory corruption

▾ SunlitSamsung Semiconductor · Exynos 2200via CVEORG

CVE-2026-69044None

yesterday

In the Samsung GPU driver, improper reference count handling during command submission can lead to memory corruption.

▾ SunlitSamsung Semiconductor · Exynos 1580via CVEORG

CVE-2026-33965None

yesterday

An attacker may send a malicious IMS message to the target device, potentially leading to information exposure through the SIP message flow.

▾ SunlitSamsung Semiconductor · Exynos 1080via CVEORG

CVE-2025-66366None

yesterday

Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crash

▾ SunlitSamsung Semiconductor · Exynos 1280via CVEORG

CVE-2025-66367None

yesterday

Improper handling of NAS DLTransport messages may lead to a baseband crash.

▾ SunlitSamsung Semiconductor · Exynos 850via CVEORG

From the blog

All posts →

Oct 27, 2026

VulnSea has moved to vulnsea.com (and what changed since September)

The beta is over. VulnSea now runs at vulnsea.com, every old beta link redirects to the same page, and your account, API keys and watchlists came with it. Plus a round of hardening, faster pages, and new request limits agents should know about.

Sep 8, 2026

What's new: open corpus, three new MCP tools, vendor advisories, package pages

A summary of everything that shipped over the last two weeks — the whole corpus is open, agents get change feeds, alias resolution and EPSS movers, and the data now includes CVE.org, vendor CSAF, aggregated exploits and per-source scores.

Jul 1, 2026

Wiring VulnSea into an agent: a hands-on tutorial

A step-by-step guide to plugging VulnSea into automated and agentic workflows — poll the delta, triage without burning tokens, match an SBOM, and let an MCP-native model do the reasoning.

Sound the depths of every vulnerability.

Trending now

Feed

Processing a malformed RRC message leads to an out-of-bounds read, resulting in a denial-of-service condition.

In the NAS message handler, improper validation of the length field in NAS message causes memory corruption

In the baseband, memory corruption during NAS packet processing can cause a denial of service.

A double free vulnerability in NPU driver due to improper pointer management (940)

Out of bound access in PPC due to race condition in global variable access

In the NR RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition.

A double free vulnerability in NPU driver due to improper pointer management (941)

Improper handling of messages before AS security activation can cause unexpected behavior

In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service.

Improper permission handling during buffer operations allows untrusted applications to create memory mappings with inappropriate permissions

Integer overflow in NPU driver parameter processing due to insufficient bounds checking.

In the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged application to trigger memory corruption.

Insufficient length validation in the GNSS firmware loader may lead to corruption of kernel memory.

Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption.

In the Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service

In the Samsung Exynos H-Arx DRM plugin, improper input validation during buffer operations can cause memory corruption, potentially leading to denial of service or privilege escalation.

Memory corruption in GPU driver due to improper validation of VMID reservation.

Incorrect authorization in Samsung framework services due to missing permission checks

In the Samsung Exynos ENN NeuralNetworks HAL, improper input validation during request processing can cause memory corruption and lead to a denial of service condition.

Out-of-bounds memory access in a device driver due to improper resource state tracking.

In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory corruption

In the Samsung GPU driver, improper reference count handling during command submission can lead to memory corruption.

An attacker may send a malicious IMS message to the target device, potentially leading to information exposure through the SIP message flow.

Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crash

Improper handling of NAS DLTransport messages may lead to a baseband crash.

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

Sound the depths of every vulnerability.

Trending now

Feed

Processing a malformed RRC message leads to an out-of-bounds read, resulting in a denial-of-service condition.

In the NAS message handler, improper validation of the length field in NAS message causes memory corruption

In the baseband, memory corruption during NAS packet processing can cause a denial of service.

A double free vulnerability in NPU driver due to improper pointer management (940)

Out of bound access in PPC due to race condition in global variable access

In the NR RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition.

A double free vulnerability in NPU driver due to improper pointer management (941)

Improper handling of messages before AS security activation can cause unexpected behavior

In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service.

Improper permission handling during buffer operations allows untrusted applications to create memory mappings with inappropriate permissions

Integer overflow in NPU driver parameter processing due to insufficient bounds checking.

In the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged application to trigger memory corruption.

Insufficient length validation in the GNSS firmware loader may lead to corruption of kernel memory.

Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption.

In the Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service

In the Samsung Exynos H-Arx DRM plugin, improper input validation during buffer operations can cause memory corruption, potentially leading to denial of service or privilege escalation.

Memory corruption in GPU driver due to improper validation of VMID reservation.

Incorrect authorization in Samsung framework services due to missing permission checks

In the Samsung Exynos ENN NeuralNetworks HAL, improper input validation during request processing can cause memory corruption and lead to a denial of service condition.

Out-of-bounds memory access in a device driver due to improper resource state tracking.

In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory corruption

In the Samsung GPU driver, improper reference count handling during command submission can lead to memory corruption.

An attacker may send a malicious IMS message to the target device, potentially leading to information exposure through the SIP message flow.

Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crash

Improper handling of NAS DLTransport messages may lead to a baseband crash.

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crash

Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crash